Papers for

ai system auditors

Papers whose findings have a practical use for this group, as judged from the abstract. Open a paper to read what it means in practice.

Ai text watermarks are unverifiable and their effects vary by content type

Watermarks Without Verification: AI Text Watermarking After the EU AI Act

Abstract: On August 2, 2026, the obligations of Article 50 of the EU AI Act took effect, requiring generative AI providers to mark the content their systems produce and ensure it can be detected as AI-generated. Days later, Anthropic disclosed that every Claude model released after that date embeds a watermark based on SynthID-Text in all generated text, enabled by default with no user opt-out; Google has deployed SynthID-Text in Gemini since 2024. Users objected that the watermark degrades quality, particularly for code, that it secretly encodes identifying information, and, in mutual contradiction, that it is easily removable and inescapable; the vendor answered with assurances of unchanged quality, no identifying information, and robustness to light editing. In this work, we argue that neither the objections nor the assurances can currently be verified and that this unverifiability, rather than watermarking itself, is the substantive governance failure. We sort the contested assertions by what it would take to settle each and evaluate the open-source SynthID-Text implementation on two open-weight models, because no public tool can test the deployed systems. On prose, the measured effect of the watermark does not exceed that of changing the sampling seed. On code, the cost is three points of correctness on one model and below measurement on the other, while detection remains near chance, a limitation of detectability rather than quality. The remaining gaps trace to withheld access or missing institutions and we map each to a requirement: release of matched outputs, configuration disclosure, accredited audits, a shared evaluation protocol, and interoperable detection.

Wed 9 SeptComputers and SocietyArtificial IntelligenceCryptography and Security
The gist
New rules in Europe require AI systems to mark their text so people can tell it's AI-made. The authors looked at how well one popular watermark system works and found it hard to verify claims about its quality and invisibility. They tested the watermark on normal writing and computer code and found it had little effect on regular text but made code slightly less correct. They also pointed out that there aren’t enough tools or rules to check whether these watermarks work as promised. The paper suggests we need better transparency and ways to audit AI watermarks to trust them.
Open 2609.09604v1

Flaws found in transformer explanation method with economic based fix

Unraveling the Real Working Mechanism and Inherent Flaws of GAE: A Method for Interpreting Transformer Processes from an Economic Perspective

Abstract: We observe a phenomenon that current algorithmic research in the field of explainable artificial intelligence primarily pursues better performance on several proxy metrics. On the one hand, these proxy metrics themselves are more or less flawed and cannot properly measure the quality of methods. On the other hand, metric-oriented research approaches often lead to the neglect of the rationality and interpretability of the methods themselves. Explainable artificial intelligence is abbreviated as XAI. The metric-driven research paradigm has resulted in a lack of interpretability of the relevant XAI methods themselves. Accordingly, there is a need for interpretability research on XAI methods, which can be playfully referred to as XXAI. This paper is one of our works on XXAI. This paper takes Generic Attention-model Explainability (GAE), a widely influential model interpretation method , or rather, XAI method that represents an important technical route, as the research object, and explores the real working mechanism and flaws of this method as well as the technical route it represents. Based on the conclusions of this study, it may be necessary to re-examine or verify GAE-related methods and their domain applications. We argue that GAE is an interpretation method that focuses on the attention process. After pointing out the working mechanism and flaws of GAE, we propose Cumulative Asset Holdings (CAH), a more reasonable Transformer interpretation method integrating both process-based and feature-based ideas from an economic zero-sum games perspective. In addition, it is worth noting that our method is applicable to models with special tokens, where existing methods may suffer from limitations. The model simplification research method and the analysis of additive operations adopted in this study may provide inspiration for other research works in XAI.

Mon 7 SeptArtificial IntelligenceComputer Vision and Pattern Recognition
The gist
Current methods for explaining how AI transformers make decisions often rely too much on imperfect metrics, leading to unclear explanations of how the methods actually work. The authors studied a popular explanation method called GAE and discovered some problems with it. They then proposed a new method named CAH that combines ideas from process and features, using concepts from economic zero-sum games to better interpret these models. This new approach also works well with special tokens, where other methods struggle.
Open 2609.07213v1